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What is claimed: 

1 1 . System for authorizing access to resources requested by a first user, said first user 

2 submitting an ID of said first user as an individual requesting access to one of said 

3 resources, said first user being a member of a group comprising a plurality of individual 

4 -.V users, said system comprising: 

5 a first table indicating at least one group of a plurality of individual users; 

6 H a second table indicating which resources are accessible by which of said users and which 

7 resources are accessible by which of said groups; and 

8 authorization means for comparing said first user to entries in said first table to determine 

9 y which group or groups said first user is a member and comparing said first user and said 

10 y group or groups in which said first user is a member to entries in said second table to 

1 1 determine which resources said first user is authorized to access. 

1 2. A system as set forth in claim 1 wherein said user ID corresponds to a plurality of 

2 different descriptions of said first user, and said authorization means compares all of said 

3 descriptions of said first user and said group or groups in which said first user is a 

4 member to said second table to determine which resources said first user is authorized to 

5 access. 
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1 3. A system as set forth in claim 1 further comprising a third table correlating said ED of 

2 said first user to at least one description of said first user as an individual, and wherein 

3 said authorization means compares said group or groups in which said first user is a 

4 member and at least one description of said first user, but not said ID of said first user, to 

5 said second table to determine which resources said first user is authorized to access. 

1 4. A system as set forth in claim 1 wherein said first table also includes an ID of the group 

2 in which said first user is a member and a description of said group in which said first 

3 user is a member, and said authorization means compares said description name of said 

4 S first user as an individual, but not said ID of said first user as an individual and said 

5 ^ description of said group in which said furst user is a member, but not said ID of said 

6 M= group in which said first user is a member, to said second table to determine which 

7 ^ resources said first user is authorized to access. 

1 M 5. A system as set forth in claim 4 wherein said first user can submit said group ID to 

2 L=s, request authorization to access resources accessible to said group. 

1 6. A system as set forth in claim 1 wherein said first table stores IDs, names or descriptions 

2 of said plurality of individual users and a corresponding ID, name or description of said 

3 group in which said plurality of individual users are members, said second table stores 

4 said IDs, names or descriptions of said plurality of individual users as separate entries and 

5 said ID, name or description of said group as another entry separate from said IDs, names 

6 or descriptions of said plurality of individual users, and each of said entries corresponds 

7 to a resource or resource that for which authorization is permitted. 
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1 7. A method for authorizing access to resources requested by a first user, said first user 

2 submitting an ID of said first user as an individual requesting access to one of said 

3 resources, said first user being a member of a group comprising a plurality of individual 

4 users, said system comprising: 

5 storing a first table indicating at least one group of a plurality of individual users; 

6 storing a second table indicating which resources are accessible by which of said users 

7 and which resources are accessible by which of said groups; 

8 2 comparing said first user to entries in said first table to determine which group or groups 

9 said first user is a member; and 

10 r comparing said first user and said group or groups in which said first user is a member to 

11'^ entries in said second table to determine which resources said first user is authorized to 

12 M: access* 

1 iy. 8^ A method as set forth in claim 7 wherein said user ID corresponds to a plurality of 

2 different descriptions of said first user, and the step of comparing said first user and said 

3 group comprises the step of comparing all of said descriptions of said first user and said 

4 group or groups in which said first user is a member to said second table to determine 

5 which resources said first user is authorized to access. 
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1 9. A method as set forth in claim 7 further comprising the step of storing a third table 

2 correlating said ID of said first user to at least one description of said first user as an 

3 individual, and wherein the step of comparing said first user and said group comprises the 

4 step of comparing said group or groups in which said first user is a member and at least 

5 one description of said first user, but not said K) of said first user, to said second table to 

6 determine which resources said first user is authorized to access. 

1 10, A method as set forth in claim 7 wherein said first table also includes an ID of the group 

2 in which said first user is a member and a description of said group in which said first 

3 D user is a member, and the step of comparing said first user and said group comprises the 

4 £ step of comparing said description name of said first user as an individual, but not said ID 

5 J of said first user as an individual and said description of said group in which said first 

6 2 user is a member, but not said ID of said group in which said first user is a member, to 

7 H said second table to determine which resources said first user is authorized to access. 

if^ 11. A method as set forth in claim 10 wherein said first user submits said group ID to request 

2d authorization to access resources accessible to said group. 

1 12. A method as set forth in claim 7 wherein said first table stores IDs, names or descriptions 

2 of said plurality of individual users and a corresponding ID, name or description of said 

3 group in which said plurality of individual users are members, said second table stores 

4 said IDs, names or descriptions of said plurality of individual users as separate entries and 

5 said ID, name or description of said group as another entry separate from said IDs, names 

6 or descriptions of said plurality of individual users, and each of said entries corresponds 

7 to a resource or resource that for which authorization is permitted. 
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1 13. A computer program product for authorizing access to resources requested by a first user, 

2 said first user submitting an ID of said first user as an individual requesting access to one 

3 of said resources, said first user being a member of a group comprising a plurality of 

4 individual users, said computer program product comprising: 

5 a computer readable medium; 

6 first program instruction means for storing a first table indicating at least one group of a 

7 H plurality of individual users; 

8 ^ second program instruction means for storing a second table indicating which resources 

9 tt' are accessible by which of said users and which resources are accessible by which of said 

10 gl groups; and 

1 1 ^ third program instruction means for comparing said first user to entries in said first table 
12M. to determine which group or groups said first user is a member and comparing said first 

13 Sli user and said group or groups in which said first user is a member to entries in said 

14 second table to determine which resources said first user is authorized to access; and 

15 wherein said first, second and third program instruction means are recorded on said 

1 6 computer readable medium. 

1 14. System for authorizing access to resources requested by a user, said system comprising: 

2 a first table correlating an E) of said user as an individual to at least one description of 

3 said user as an individual; 
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4 a second table indicating at least one grouping of a plurality of individual user 

5 descriptions into a group; 

6 a third table indicating which resources are accessible by which of said user descriptions 

7 and which resources are accessible by which of said groups; and 

8 authorization means for (a) comparing said user ID to entries in said first table to 

9 determine the description or descriptions of said user, (b) comparing said description or 

10 Ji; descriptions of said user to entries in said second table to determine which group or 

1 1 D groups said user is a member and (c) comparing said description or descriptions of said 

12 J user and said group or groups in which said user is a member to entries in said third table 

13 ^ to determine which resources said user JD is authorized to access. 

1 □ 15. A system as set forth in claim 7 wherein said second table also includes an ID of the 

2 group in which said first user is a member and a description of said group in which said 

3 first user is a member, and said authorization means compares said description name of 
4f\i said first user as an individual, but not said ID of said first user as an individual and said 

5 description of the group in which said first user is a member, but not said ID of said group 

6 in which said first user is a member, to said third table to determine which resources said 

7 first user is authorized to access. 
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